Ask it again. And again.

Every slab below is one real call, in the order we made it. Left: the plain prompt. Right: the same prompt with the paper's instruction to write a random string first. The red dashes mark where each stack should be if the model followed the target.